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DETAILED ACTION 

1 . Claims 9-1 9 are pending in this office action. 

2. In view of the appeal brief filed on June 26, 2006, PROSECUTION IS HEREBY 
REOPENED. A new ground of rejection is set forth below. 

To avoid abandonment of the application, appellant must exercise one of the following two options: 

( 1 ) file a reply under 37 CFR 1 . 1 1 1 (if this Office action is non-final) or a reply under 37 CFR 1.1 13 (if this Office 
action is final); or, 

(2) initiate a new appeal by filing a notice of appeal under 37 CFR 41 .31 followed by an appeal brief under 37 CFR 
4 1 .37. The previously paid notice of appeal fee and appeal brief fee can be applied to the new appeal. If, however, the appeal 
fees set forth in 37 CFR 4 1 .20 have been increased since they were previously paid, then appellant must pay the ditTerence 
between the increased fees and the amount previously paid. 

A Supervisory' Patent Examiner (SPE) has approved of reopening prosecution by signing below: 

Rejections 

3. The text of those sections of Title 35, U.S. Code not included in this action can 
be found in a prior Office action. 

Claim Rejections - 35 USC § 103 

4. Claims 9-14, 18, and 19 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Ishiguro et al. (U.S. Patent No. 5,396,558) in view of Smart Card 
(definition of Smart card, accessed from http://en.wikipedia.org/wiki/Smart card on 
August 31, 2006). 
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With respect to Claim 9, Ishiguro et al. teaches a method of performing a 
transaction in a communication system between a first and a second participant wherein 
said second participant permits a service to be provided to said first participant in 
exchange for a payment (abstract), said method comprising the steps of: 

• Upon initiation of said transaction by said first participant, said second participant 
sending a first message to said first participant, said first message including 
information pertaining to said second participant (col. 2, lines 40-42); 

• Said first participant verifying said information pertaining to said second 
participant to obtain assurance that said service will be provided upon assuring 
said payment (col. 2, lines 43-47); 

• Said first participant sending a second message to said second participant, said 
second message including information pertaining to said first participant (col. 2, 
lines 48-51); and 

• Said second participant verifying said information pertaining to said first 
participant to obtain assurance that payment will be secured upon provision of 
said service (col. 2, lines 52-56); 

• Upon verification of said information pertaining to said first participant, said 
second participant obtaining a digital signature for said first participant on said 
transaction using said second message (col. 3, lines 35-46). 



Ishiguro et al. does not teach whereby said second participant may obtain 
payment from a third participant using said digital signature. 
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Smart Card teaches whereby said second participant may obtain payment from a 
third participant using said digital signature (page 1 , History, third paragraph and page 
2, History, second paragraph). 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to combine the teachings of Smart Card within the system of 
Ishiguro et al because a combination of the verification benefits (from a smart card), 
with the external accounts (from credit/debit cards) allows a user to supply verification 
information and provide payment from an external account (see page 1 , History, third 
paragraph of Smart Card). 

With respect to Claim 10, Ishiguro et al. in view of Smart Card teaches the 
limitation of wherein said first participant is a holder of a card which performs 
cryptographic operations (see col. 2, lines 16-25 of Ishiguro et al.). The cryptographic 
operations are disclosed on col. 2, lines 26-61. 

With respect to Claim 1 1 , Ishiguro et al. in view of Smart Card teaches the 
limitation of wherein said second participant is a terminal (see col. 2, lines 43-47 of 
Ishiguro et al.). 
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With respect to Claim 12, Ishiguro et al. in view of Smart Card teaches the 
limitation of wherein said third participant is a financial institution (see page 2, second 
paragraph of Smart Card). 

With respect to Claim 13, Ishiguro et al. in view of S mart Card teaches the 

limitation of said information pertaining to said second participant included in said first 

message includes details and credentials of said second participant (see col. 2, lines 

48-51 of Ishiguro et al.); and said first participant verifies said details and said 

» 

credentials (see col. 2, lines 52-56 of Ishiguro et al.). 

With respect to Claim 14, Ishiguro et al. in view of Smart Card teaches the 
limitation of said information pertaining to said first participant included in said second 
message includes details and credentials of said first participant (see col. 2, lines 40-42 
of Ishiguro et al.); and said second participant verifies said details and said credentials 
(see col. 2, lines 43-47 of Ishiguro et al.). 

With respect to Claim 18, Ishiguro et al. in view of Smart Card teaches the 
limitation of wherein said credentials include a public key certificate (see col. 2, lines 52- 
56 of Ishiguro et al.). The presence of a public key and terminal identification number 
being used to verify validity of a digital signature requires the presence of a public key 
certificate. 
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With respect to Claim 19, Ishiguro et al. in view of Smart Card teaches the 
limitation of wherein said challenge is a nonce (see fig. 10 and col. 16, lines 1-6 of 
Ishiguro et al.). A time stamp is used as a time variant parameter to prevent against 
replay attacks. 

Claims 15-17 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Ishiguro et al . (USPN '558) in view of Smart Card (definition of Smart card, accessed 
from http://en.wikipedia.org/wiki/Smart card on August 31 , 2006) in further view of 
Chaum (U.S. Patent No. 5,276,736). 

With respect to Claim 15, all the limitation above are met by the combination of 
Ishiguro et al. in view of Smart Card except the limitation disclosed below. 

Chaum meets the limitation of said second participant generating a response to 
said challenge (col. 3, lines 57-60); and said second participant sending a third 
message including said response to said first participant (col. 3, lines 57-60); and said 
first participant verifying said response (col. 3, lines 52-55 and 57-62); and said first 
participant sending a fourth message to said second participant such that said digital 
signature is provided by said second message and said fourth message (col. 4, lines 
20-27, 57-60). The message being signed reflects a digital signature being appended 
to the message being sent. 
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It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to combine the teachings of Chaum within the combination of 
Ishiguro et al and Smart Card because verification of the challenge prevents an outside 
attacker from using a replay attack to gain access to the system. The challenge is 
unique and once verified, provides a greater guarantee that the transaction is in fact 
legitimate. 

With respect to Claim 16, the combination of Ishiguro et al. in view of Smart 
Card/Chaum teach said second participant verifying information in said fourth message 
(see col. 4, lines 20-27 of Chaum); and said second participant completing said 
transaction by providing said service (see col. 4, lines 44-47 and 57-60 of Chaum); and 
said second participant sending said third participant a subset of said first, second, third 
and fourth messages to obtain said payment (see col. 4, lines 35-45 of Chaum). 

With respect to Claim 17, the combination of Ishiguro et al. in view of Smart 
Card/Chaum teach said third participant verifying said subset (see col. 4, lines 37-43 of 
Chaum); and said third participant providing said payment to said second participant 
(see col. 4, lines 44-47 of Chaum). 

Any inquiry concerning this communication or earlier communications from'the 
examiner should be directed to Brandon S. Hoffman whose telephone number is 571- 
272-3863. The examiner can normally be reached on M-F 8:30 - 5:00. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nasser G. Moazzami can be reached on 571-272-4195. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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